Privacy Policy

FlowSync is operated by Artek Group Technologies, LLC.

Effective date: October 27, 2026

FlowSync is an online scheduling platform operated by Artek Group Technologies, LLC ("Artek Group," "we," "us" or "our"). Businesses use FlowSync to let their customers book appointments and classes, manage staff schedules, and send booking confirmations and reminders. This privacy policy is specific to the FlowSync application. It explains what information FlowSync collects, how we use it, who we share it with, and the choices you have. It applies to the FlowSync website at https://flowsync.theartekgroup.com, every business booking page hosted on FlowSync, the FlowSync embed, and the FlowSync API.

Questions about this policy can be sent to flowsync@theartekgroup.com.

1. Who this policy covers

Customers: people who book an appointment or class through a business that uses FlowSync.
Staff and administrators: employees, owners and administrators of businesses that use FlowSync, including people who connect a Google or Microsoft calendar.
Visitors: people who visit the FlowSync website or submit the "Request access" form.

When you book with a business on FlowSync, that business decides why your booking information is collected and how it is used for its services. FlowSync processes that information on the business's behalf to provide the scheduling service.

2. Information we collect

Information you give us

Customers: name, email address, phone number, the service, date and time you book, answers to the business's booking questions, notes you add, and whether you agreed to receive text-message reminders (including the date and wording of that consent).
Staff and administrators: name, email address, role, the businesses you belong to, working hours, time off, the services and locations you are assigned to, and an optional permanent meeting link.
Visitors: the name, organization, email address and message you enter in the "Request access" form.

Information collected automatically

Basic technical and usage information, such as IP address, browser type, pages visited, the date and time of requests, and error logs. We use this to keep FlowSync secure, prevent abuse and fix problems.
Essential cookies or similar storage needed to keep staff signed in and to remember booking-page settings. FlowSync does not use advertising cookies.

Information from connected apps

If a business connects another app (such as ThrivePath OS or Legacy Pulse), that app may pass a short reference code and a source label with a booking so the two apps can match it. The app may also pre-fill your name, email and phone, which you can change before booking.

3. Google user data

This section explains how FlowSync accesses, uses, stores, shares, protects, retains and deletes data received from Google APIs ("Google user data"). Section 4 covers Microsoft calendar data, which FlowSync handles the same way.

Staff members of businesses that use FlowSync can choose to connect their own Google Calendar. Customers never connect a Google account, and connecting is never required to use FlowSync.

FlowSync's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3.1 Data accessed

When a staff member clicks Connect Google in FlowSync and gives permission, FlowSync accesses only:

Calendar events (Google scope https://www.googleapis.com/auth/calendar.events.freebusy): the ability to create, update and delete events on the staff member's Google Calendar.
Free/busy information (covered by the Google scope https://www.googleapis.com/auth/calendar.events.freebusy, requested with calendar events): the times the staff member is busy or free, without event titles or details. Used only if the staff member turns on "Block my busy times."
Basic account identity: the Google account's email address, so the staff member can see which account is connected.

FlowSync does not request or access Gmail, Google Contacts, Google Drive, Google Docs, Google Sheets or any other Google data.

3.2 Data use

FlowSync uses Google user data only to provide these features the staff member asked for:

1.Add the staff member's booked appointments and classes to their Google Calendar.
2.Update or delete those events when a booking is rescheduled or cancelled.
3.Check when the staff member is busy, so customers are not offered booking times when the staff member is unavailable.
4.Show the staff member which Google account is connected and when it last synced.

FlowSync does not use Google user data for any other purpose. Specifically, FlowSync does not use or transfer Google user data:

for serving advertisements, including targeted, personalized, retargeted or interest-based advertising;
to sell it, or to provide it to data brokers or information resellers;
to determine credit-worthiness or for lending purposes;
to create databases or build profiles about users;
to develop, improve or train generalized or non-personalized artificial intelligence (AI) or machine-learning (ML) models. FlowSync does not use Google Workspace APIs or any Google user data to develop, improve or train AI or ML models.

People at Artek Group do not read Google user data unless (a) the staff member gives us permission for a specific support request, (b) it is necessary for security purposes, such as investigating abuse, (c) it is necessary to comply with applicable law, or (d) the data has been aggregated and anonymized for internal operations, as allowed by the Google API Services User Data Policy.

3.3 Data storage

FlowSync stores only what it needs to provide the features above:

the IDs of the calendar events FlowSync created, so it can update or delete them later;
the encrypted OAuth access and refresh tokens for the connection;
the connected Google account's email address and the time of the last sync;
busy time ranges, kept only briefly to calculate open booking times.

FlowSync does not store the titles, descriptions, attendees, locations or other details of calendar events it did not create.

3.4 Data sharing

FlowSync does not sell Google user data, and does not share, transfer or disclose it to third parties, except:

with service providers that host and run FlowSync (for example, our cloud hosting and database provider), only to provide the features above and under confidentiality obligations;
when required by law, such as a valid court order;
as part of a merger, acquisition or sale of assets, with prior notice to affected users and only under these same protections.

The businesses that use FlowSync do not see a staff member's Google Calendar events or busy-time details. They see only FlowSync's own bookings.

3.5 Data protection

All data is encrypted in transit using HTTPS (TLS).
OAuth tokens are encrypted at rest and stored on our servers only; they are never sent to the browser or written to logs.
Access to Google user data is limited by role and by business, and administrative access is recorded in audit logs.
We review our security practices regularly and will notify affected users if required by law.

3.6 Data retention and deletion

Google user data is kept only while the staff member's Google Calendar is connected.
Disconnecting: a staff member can disconnect at any time from Business settings → My calendars → Disconnect. FlowSync then deletes the stored OAuth tokens, the connected email address and any stored busy-time data immediately. The IDs of events FlowSync created are deleted within 30 days.
Revoking access in Google: a staff member can also remove FlowSync's access at any time at https://myaccount.google.com/permissions. FlowSync then stops accessing their calendar and deletes the stored tokens the next time it detects the revoked access.
Requesting deletion: you may request for your data to be deleted by emailing flowsync@theartekgroup.com from the email address on your account. We will confirm and complete the deletion within 30 days.
If a staff member's FlowSync account is removed, all of their Google user data is deleted within 30 days.

4. Microsoft calendar data

Staff members can also choose to connect their own Microsoft Outlook calendar. FlowSync treats Microsoft data under the same rules as Google user data in Section 3: the same limited uses, no advertising, no sale, no AI or ML training, the same storage, sharing, protection, retention and deletion practices.

Access requested: read and write calendars (Calendars.ReadWrite), create online meetings (OnlineMeetings.ReadWrite), read basic profile information (User.Read), and stay connected while the staff member is signed out (offline_access).
Used only to: add, update and delete booking events; check busy times; and create Microsoft Teams meeting links for virtual appointments (work or school accounts only).
FlowSync never reads, sends or stores Outlook email, contacts or files.
Revoking access: https://account.microsoft.com/privacy/app-access (personal accounts) or https://myapps.microsoft.com (work or school accounts), or Disconnect in FlowSync.

5. How we use information

We use information to:

Show open times, take bookings, and let customers reschedule or cancel.
Send booking confirmations, reminders, changes and cancellations by email and, with consent, by text message.
Let businesses manage their staff, services, schedules and customers.
Add bookings to connected staff calendars and create meeting links, as described in Sections 3 and 4.
Respond to support requests and "Request access" submissions.
Keep FlowSync secure, prevent fraud and abuse, and fix errors.
Comply with legal obligations.

We do not sell personal information, and we do not use it for advertising.

6. How we share information

With the business you book with: your booking details and answers go to that business and its authorized staff. Each business sees only its own customers.
Within an umbrella company: if a business belongs to a parent organization that manages it in FlowSync, that organization's administrators can see the business's bookings and customers.
With connected apps a business chooses: booking details the business allows that app to receive (for example, a booking reference and time).
With service providers who help us run FlowSync, such as hosting, email delivery, text-message delivery, and calendar and video providers. They may use the information only to provide those services to us.
For legal reasons: when required by law, to respond to valid legal requests, or to protect the rights, safety and security of our users, the public or Artek Group.
Business transfers: if Artek Group is involved in a merger, acquisition or sale of assets, with notice to affected users.

7. Text messages

If you check "Text me reminders" when booking, you agree to receive appointment-related text messages from the business through FlowSync. Message frequency depends on your bookings. Message and data rates may apply. Reply STOP to opt out at any time, or START to opt back in. We do not share your phone number or text-message consent with third parties for their marketing.

8. Data retention

Booking and customer records are kept for as long as the business uses FlowSync and needs them, or as required by law. A business can delete or export its records.
Google and Microsoft calendar data is kept and deleted as described in Section 3.6.
Technical logs are kept for up to 12 months.
"Request access" submissions are kept for up to 24 months unless you ask us to delete them sooner.

9. Your choices and rights

Access, correction and deletion: you can ask the business you booked with, or email flowsync@theartekgroup.com, to see, correct or delete your information. We will respond within 30 days.
Manage bookings: use the "Manage booking" link in your confirmation to reschedule or cancel.
Email and text messages: booking emails are part of the service; you can stop text messages by replying STOP.
Calendars: staff can disconnect a calendar at any time, as described in Sections 3 and 4.

Depending on where you live, you may have additional privacy rights under local law. We will honor those rights as required.

10. Security

We protect information with encryption in transit (HTTPS), connection tokens and keys stored encrypted on our servers only, role-based access so each person sees only what their role allows, separation of each business's data, and audit logs of administrative actions. No system is perfectly secure, but we work to protect your information and will notify affected users if required by law.

11. Children

FlowSync is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If a parent or guardian books an appointment for a child, the parent or guardian provides the information. If you believe a child under 13 has given us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new effective date. If we change how FlowSync uses Google or Microsoft user data, we will notify connected staff members by email and in FlowSync before the change takes effect and, where required, ask for their permission again.

13. Contact us

Artek Group Technologies, LLC

Email: flowsync@theartekgroup.com

Website: https://flowsync.theartekgroup.com